CVE-2005-3902

概要

参考情報

• lists.grok.org.uk/pipermail/full-disclosure/2005-November/039000.html · Patch
• marc.info
• moritz-naumann.com/adv/0006/vhcsxss/0006.txt · Patch
• secunia.com/advisories/17704 · Patch
• securityreason.com/securityalert/202
• osvdb.org/21060 · Exploit
• securityfocus.com/bid/15538 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/23209

virtual hosting control system のその他の脆弱性

• CVE-2007-3988中 6.8Session fixation vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier allows remote attackers to hijack web sessions b…
• CVE-2006-2174中 4.3Multiple cross-site scripting (XSS) vulnerabilities in admin/server_day_stats.php in Virtual Hosting Control System (VHCS) allow remote atta…
• CVE-2006-0686緊急 10.0add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a new administrative us…
• CVE-2006-0685緊急 10.0The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when authentication fails, …
• CVE-2006-0684高 7.5change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the pa…